The DoD is empowered to determine its own supply chain risks by...wait for it...legislation.